Unscored severity · published Nov 16, 2007
CVE-2007-4572
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via…
–
CVSS
5.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
3.0.0; 3.0.1; 3.0.2; 3.0.2a; 3.0.3; 3.0.4; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4572
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=307179
lists.apple.com
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2008/000002.html
marc.info
http://marc.info/?l=bugtraq&m=120524782005154&w=2
Patch
http://secunia.com/advisories/27450
Vendor Advisory
http://secunia.com/advisories/27679
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…